Home // ICSNC 2015, The Tenth International Conference on Systems and Networks Communications // View article
Implementation of Netflow based Interactive Connection Traceback System
Authors:
Jung-Tae Kim
Ik-Kyun Kim
Koo-Hong Kang
Keywords: Peer-to-Peer; Connection Traceback; Interactive Hacking; Timing-based Traceback
Abstract:
The paper proposes a method and system for finding stepping stones, as well as origins of the advanced cyber attacks based on the interactive connections traceback system. To do so, the traceback system to be installed at the enterprise gateway utilizes distributed netflow collectors that subscribe netflow information from nearby edge routers with command configured to support netflow generation and traceback agents for finding real-time connections from the victim to attacker. By implementing such a system would support the real-time connection traceback of the attack origins for the interactive hacking attacks without any helps of the Internet Service Providers or governmental security organizations.
Pages: 21 to 26
Copyright: Copyright (c) IARIA, 2015
Publication date: November 15, 2015
Published in: conference
ISSN: 2163-9027
ISBN: 978-1-61208-439-8
Location: Barcelona, Spain
Dates: from November 15, 2015 to November 20, 2015